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Amendments to the Claims 

The listing of claims below replaces all prior versions and listings of claims. 

Listing of Claims 



Claim 1 (Currently Amended): A method for executing secure data transfer 
between a communication device and an application server, wherein data are 
transferred over a network between the application server and the communication 
device, comprising: 

sending an agreement proposal for a secure transaction of data from the 
server to a security adapter connected to the network, said security adapter residing 
on the network distinctly from the server and the communication device . 

creating and sending a message from the security adapter to the 
communication device in order to activate a signing application, 

the signing application signing the data to be sen4 sent , sending the signed 
data from the communication device to the security adapter, 
-^S ^ > verifying the signature for the data, and sending the verified signed data to the 

server for execution of the transaction. 

Claim 2 (Previously Presented): A method according to claim 1 , wherein 
information browsing on the server is initiated from either the application server or 
the communication device, wherein data are transferred over the network between 
the application server and the communication device. 




Claim 3 (Previously Presented): A method according to claim 1, comprising 
before the step of sending an agreement proposal, the further step of: 

sending a request requiring a secure transaction of data, either from the 
communication device to the application server, or from the application server to the 
communication device. 

Claim 4 (Previously Presented): A method according to claim 1 , wherein the 
step of sending a message from the security adapter to the communication device in 
order to activate a signing application further comprises the steps of: 
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entering details of the transaction to be secured and a sign request into at 

j 

least one message, 

sending the at least one message from the security adapter to a smart card in 
the communication device for activating the signing application, 

displaying the details of the transaction and a prompt for an accept on the 
communication device. 

Claim 5 (Currently Amended): A method according to claim 1 , wherein the 
step of signing the data further comprises the step of: 

accepting the transaction, the signing application signing the data to be sen4 
sent with a secret/private key by using an algorithm. 

Claim 6 (Currently Amended): A method according to claim 1 r wherein the 
step of sending an agreement proposal comprises the further step of: 

sending the agreement proposal for the secure transaction from the server to 
the communication device for acceptance before the agreement proposal is se nd 
sent to the security adapter. 

Claim 7 (Previously Presented): A method according to claim 4, wherein the 
smart card is a SIM card (subscriber identity module), the data transfer protocol is 
the WAP (Wireless Application Protocol), the signing application is a SAT (SIM 
Application Toolkit) application, the communication application is a WAP application, 
and the message is at least an SMS or USSD packet. 

Claim 8 (Previously Presented): A method according to claim 7, wherein the 
WAP application in the communication device is suspended or terminated when the 
SAT application is activated. 

Claim 9 (Currently Amended): A system for executing secure data transfer 
between a communication device and an application server over a wireless network, 
comprising a security adapter connected to the network for monitoring the data 
transfer between the communication device and the application server, wherein 



PAGE 9/15 * RCVD AT 1/1612004 7:58:40 PM [Eastern Standard Time] • SVR:USPTO-EFXRMJ0 * DNIS:8729306 * CSID:919 941 1515 * DURATION (miMs):03-50 



01/16/2004 21:00 FAX 919 941 151 5 ^ BURNS DOANE ©010 



Application No. 09/676.186 Attorney Docket No. 026125-069 

Amendment filed January 16. 2004 _ , n^n^vt 

Reply to Office Action dated July 16, 2004. Advisory Action dated January 9, 2004 

said server is adapted to send an agreement proposal for a secure 
transaction of data to the security adapter, said security adapter residing on the 
network distinctly from the server and th e communication device, 

said security adapter is adapted to receive said agreement proposal for a 
secure transaction from the server, and create and send a message to the 
communication device for activating a signing application, 

said communication device is adapted to sign the data, and send the signed 
data to the security adapter. 

said security adapter is adapted to receive, and send the signed data for 
verification and then send the verified signed data to the application server for 
execution of the transaction. 

Claim 10 (Previously Presented): A system according to claim 9. wherein 
said communication device comprises a secret/ private key. an algorithm for signing 
^ ' of data, and a signing application for handling a signing dialogue and the signing of 



data. 



Claim 1 1 (Previously Presented): A system according to claim 10, wherein 
said secret/ private key, said algorithm, and said signing application is stored on a 
smart card such as a SIM card (subscriber identity module), the data transfer 
protocol is the WAP (Wireless Application Protocol), the signing application is a SAT 
(SIM Application Toolkit) application, and the message is at least an SMS or USSD 
packet. 

Claim 12 (Previously Presented): A system according to claim 9, wherein 
said network comprises a mobile telephone network for connection to the 
communication device, the Internet for the connection to the application server, and 
a WAP gateway connecting the mobile telephone network to the Internet. 

Claim 13 (Previously Presented): A system according to claim 12, wherein 
said security adapter is connected to the WAP gateway. 
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Claim 14 (Previously Presented): A system according to claim 9, wherein in 
said security adapter is connected to the application server. 

Claim 15 (Previously Presented): A system according to claim 9, wherein 
said communication device is a mobile phone or a portable computer having 
transmitting /receiving capability. 

Claim 16 (Previously Presented): A system according to claim 15, wherein 
the mobile phone comprises means for displaying a particular icon, character, font, 
or colour connected to certain applications or the operating system in the phone, 
wherein the user can be assured that he is really communicating directly with the 
security application. 




Claim 17 (Currently Amended): A security adapter for connection to a 
wireless network for monitoring the data transfer between a communication device 
and an application server connected to the network, wherein 

means for receiving an agreement proposal for a secure transaction from the 
communication device, 

means for creating and sending a message to the communication device in 
order to activate a signing application, 

means for receiving signed data send sent from the communication device, 

and 

means for sending the signed data for verification and then to the application 
server for execution of the transaction^ 

wherein said security adapter resides on the network distinctly from the server 
and the communication device. 



Claim 18 (Currently Amended): A computer program product directly loadable 
into the internal memory of a security adapter with digital computer capabilities, 
compri s ing comprising software code portions for performing the steps of: 

receiving an agreement proposal for a secure transaction from a 
communication device. 
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creating and sending a message to the communication device in order to 

activate a signing application, 

receiving signed data sen4 sent from the communication device, and 
sending the signed data for verification and then to an application server for 
execution of the transaction 

wherein said security adapter resides on the network distinctly from the server 
and the communication device .. 

Claim 19 (Currently Amended): A computer program element comprising 
computer program code means to make a security adapter with digital computer 
capabilities execute the steps of: receiving an agreement proposal for a secure 
transaction from a communication device, 

creating and sending a message to the communication device in order to 
activate a signing application, 

receiving signed data send sent from the communication device, and sending 
the signed data for verification and then to an application server for execution of the 
transaction 

wherein said security adapter resides on the network distinctly from the server 
and the communication device . 

Claim 20 (Original): A computer program element as claimed in claim 19 
embodied on a computer readable medium. 
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